$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c50b095d-9127-3fdf-9018-684535ee2f7c.roa File: c50b095d-9127-3fdf-9018-684535ee2f7c.roa (raw, json) Hash identifier: 5JZN2K3V9+/813pWKZamSAFK5xqA4SYGgnhQrv1nlj8= Subject key identifier: 74:DC:EC:34:15:34:9D:8F:3F:0D:FB:C0:E2:47:76:A1:B3:80:61:33 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848D0ABBA59F955043344F40880 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c50b095d-9127-3fdf-9018-684535ee2f7c.roa Signing time: Sat 08 Feb 2025 14:00:52 +0000 ROA not before: Sat 08 Feb 2025 14:00:52 +0000 ROA not after: Fri 09 May 2025 13:00:52 +0000 asID: 16625 IP address blocks: 23.210.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d0:ab:ba:59:f9:55:04:33:44:f4:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 8 14:00:52 2025 GMT Not After : May 9 13:00:52 2025 GMT Subject: CN=3b38069a-1b61-4b92-be0c-efd85e456d23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d5:41:bb:2a:de:9c:51:47:8c:4c:e5:b5:f3: 67:4f:98:32:95:55:22:46:8c:c6:70:d5:5e:74:00: 54:c6:22:35:53:c5:5c:e2:6c:07:48:d1:8a:d4:c6: e8:00:00:a6:e7:f0:96:95:0e:8c:61:af:40:5d:6f: 48:e7:79:1b:19:f1:c9:8e:26:e6:4a:a0:7f:e1:5e: bf:f4:9e:b4:45:96:07:48:9d:1e:ec:d0:da:d3:dc: 38:ff:f5:8f:90:b4:6e:b4:84:9a:56:f2:c0:11:3d: f1:ad:d2:4b:0a:85:aa:ce:39:f5:a3:a7:f9:0b:15: af:24:2f:84:db:2d:31:19:b5:cf:5f:d8:5b:62:87: 5c:07:f8:f7:5d:ee:e7:f6:e2:98:d4:76:4b:fd:38: 82:42:4d:f0:8f:46:2e:a4:a8:1f:1b:00:3d:ff:f4: 16:c8:d6:57:da:75:74:1c:af:44:e5:cc:f6:87:18: 98:c6:d8:9b:fc:bb:35:30:82:18:e0:d1:10:b8:7e: bb:97:a6:2b:e1:62:c9:38:35:ed:b3:4b:d4:19:03: d1:30:a7:d3:fe:48:ae:59:1b:78:08:65:99:db:06: 14:7c:44:e6:46:e8:6c:e7:79:13:0a:43:b0:37:69: 27:a2:b8:3c:b4:92:7c:0b:dc:16:cb:84:a5:89:cf: d5:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:DC:EC:34:15:34:9D:8F:3F:0D:FB:C0:E2:47:76:A1:B3:80:61:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c50b095d-9127-3fdf-9018-684535ee2f7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.210.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:b8:aa:be:f3:5b:5f:90:05:ff:0d:51:c1:aa:c2:3a:24:91: 81:69:23:a1:9f:a0:71:46:30:57:25:e2:cf:1c:23:46:97:42: 91:fd:3b:8d:d4:be:0a:1c:1e:6e:91:19:06:a2:e0:00:4c:e8: 09:37:c0:02:65:f9:06:03:91:71:c1:f3:a7:65:83:b7:90:9c: c6:4c:9d:1b:8d:a4:d2:b3:99:ab:51:ef:8f:e2:56:14:4e:ed: f6:41:15:4c:ed:8d:0e:6e:14:03:0e:7c:6c:59:53:cf:30:c5: f6:5c:e2:3f:1e:dd:50:bf:ee:1d:1c:2f:68:e6:25:ea:51:d6: b4:c9:5f:7c:e9:04:52:7a:71:a8:82:fa:9d:a1:1d:c7:7a:2e: b9:6e:2a:22:a4:ad:b7:b7:f3:7e:25:eb:25:69:02:82:1b:50: 27:e6:24:58:59:29:f6:af:68:25:2d:00:20:d4:20:84:1d:d5: 17:ce:60:f9:64:37:1f:ad:10:78:72:60:8a:f2:95:4f:56:0b: ed:05:26:8f:0f:7f:14:80:ac:48:55:e8:85:91:42:f3:45:28: c3:50:91:3c:58:91:20:2b:1b:37:71:1a:ce:4b:ad:d6:91:3d: 17:88:02:75:2c:53:9e:58:17:67:6d:9a:bc:68:ec:af:fd:95: 42:8e:7d:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjQq7pZ+VUEM0T0CIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIwODE0MDA1MloXDTI1MDUwOTEzMDA1MlowLzEtMCsGA1UEAxMk M2IzODA2OWEtMWI2MS00YjkyLWJlMGMtZWZkODVlNDU2ZDIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNVBuyrenFFHjEzltfNnT5gylVUiRozGcNVe dABUxiI1U8Vc4mwHSNGK1MboAACm5/CWlQ6MYa9AXW9I53kbGfHJjibmSqB/4V6/ 9J60RZYHSJ0e7NDa09w4//WPkLRutISaVvLAET3xrdJLCoWqzjn1o6f5CxWvJC+E 2y0xGbXPX9hbYodcB/j3Xe7n9uKY1HZL/TiCQk3wj0YupKgfGwA9//QWyNZX2nV0 HK9E5cz2hxiYxtib/Ls1MIIY4NEQuH67l6Yr4WLJODXts0vUGQPRMKfT/kiuWRt4 CGWZ2wYUfETmRuhs53kTCkOwN2knorg8tJJ8C9wWy4Slic/VIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHTc7DQVNJ2PPw37wOJHdqGzgGEzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzUwYjA5NWQtOTEyNy0z ZmRmLTkwMTgtNjg0NTM1ZWUyZjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9IcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI24qr7zW1+QBf8NUcGqwjokkYFpI6GfoHFGMFcl4s8cI0aXQpH9O43U vgocHm6RGQai4ABM6Ak3wAJl+QYDkXHB86dlg7eQnMZMnRuNpNKzmatR74/iVhRO 7fZBFUztjQ5uFAMOfGxZU88wxfZc4j8e3VC/7h0cL2jmJepR1rTJX3zpBFJ6caiC +p2hHcd6LrluKiKkrbe3834l6yVpAoIbUCfmJFhZKfavaCUtACDUIIQd1RfOYPlk Nx+tEHhyYIrylU9WC+0FJo8PfxSArEhV6IWRQvNFKMNQkTxYkSArGzdxGs5LrdaR PReIAnUsU55YF2dtmrxo7K/9lUKOfZ8= -----END CERTIFICATE-----Generated at Sun Feb 16 20:38:17 2025 by rpki-client